Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
File:                     79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json)
Hash identifier:          VVpW/pviRyz80BHjMGuGUVnJYj1do1IYYkebXFfoEu4=
Subject key identifier:   2F:E9:D4:D5:F0:5B:A1:91:7E:58:C4:59:8E:FD:C5:F2:EC:DA:08:E7
Certificate issuer:       /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial:       75
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
Signing time:             Thu 31 Oct 2024 21:40:08 +0000
ROA not before:           Thu 31 Oct 2024 21:40:08 +0000
ROA not after:            Sat 01 Mar 2025 00:00:00 +0000
asID:                     141015
IP address blocks:        103.154.240.0/23 maxlen: 24
                          2407:e340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
        Validity
            Not Before: Oct 31 21:40:08 2024 GMT
            Not After : Mar  1 00:00:00 2025 GMT
        Subject: CN=6723f938-da52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:b2:a2:f6:85:7c:2c:34:f7:19:06:ca:2a:
                    2b:fb:dd:9a:05:12:db:4d:54:eb:57:1d:0d:b2:7a:
                    e6:56:bc:4a:9b:1e:d0:99:f1:6b:8a:47:8b:0b:bd:
                    6b:c2:dc:e0:90:11:74:39:16:fb:b5:2f:27:5f:c4:
                    c7:de:4f:b5:1e:75:e7:58:b3:4b:4a:90:b2:ab:43:
                    31:62:2e:f4:48:83:7f:15:c0:75:9c:3b:1a:7d:e9:
                    3d:dd:4a:82:2e:e8:ec:dc:c7:bc:c9:d8:a0:f9:09:
                    69:ee:53:b0:5d:a8:bf:14:6c:04:32:88:3f:bf:bc:
                    58:d8:46:b7:b0:f0:1c:e0:e4:8c:9a:9d:13:23:6e:
                    f4:b7:79:f9:bf:42:c5:3f:35:23:ad:92:72:d2:1d:
                    36:2b:a6:4d:e8:1e:59:fc:ae:0e:0b:a4:56:c9:fe:
                    7f:3a:01:25:c8:32:c6:66:ae:a9:4d:3a:8f:b8:5d:
                    88:b8:af:f8:8a:9a:9e:98:a4:a1:71:83:42:91:78:
                    86:cf:7c:93:90:3c:6a:5f:96:ce:43:2c:3b:b1:ca:
                    01:e9:52:3e:f0:e0:9e:08:02:aa:df:f4:8a:af:70:
                    cd:61:fb:7a:6d:ad:04:fb:b7:24:1e:b6:c4:a5:9d:
                    34:a2:8d:fc:7f:f9:8a:56:94:88:ae:dd:b7:e8:24:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:D4:D5:F0:5B:A1:91:7E:58:C4:59:8E:FD:C5:F2:EC:DA:08:E7
            X509v3 Authority Key Identifier:
                keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.240.0/23
                IPv6:
                  2407:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:06:95:c7:71:f6:51:53:f1:e8:df:ef:07:cc:7d:6d:87:88:
         b2:7a:04:9b:8d:5d:78:5c:2f:02:3f:c4:66:3d:3f:10:65:9e:
         9a:15:85:e1:39:7a:24:0d:e1:5b:1b:ae:89:f5:de:32:09:91:
         c8:5e:b8:e3:80:17:c4:87:22:f8:a4:62:80:c7:ba:38:d2:d6:
         5d:8f:4f:3a:25:32:8c:9c:0e:d2:93:0d:08:78:32:05:d0:07:
         36:58:c0:6f:5b:02:73:62:cc:a8:e9:9b:63:2a:0c:7d:7b:09:
         3a:d2:b9:ff:a0:c4:5f:e4:7e:08:40:40:16:b5:43:b4:61:88:
         4f:52:72:0f:de:f8:a1:e1:a4:77:70:3e:92:45:6f:cb:4d:38:
         5e:1b:20:df:b5:b4:27:87:3a:81:21:69:7e:01:a1:72:e0:86:
         65:49:cf:5d:ff:57:ce:8d:a5:6d:00:2b:7e:6f:f3:58:4a:50:
         27:b7:6d:2a:17:e7:ea:e4:bf:33:06:a4:7b:80:ac:fc:e4:3a:
         0f:1e:30:00:bd:9c:a9:9b:36:d0:36:fb:30:dc:e4:1b:0b:49:
         0b:1b:cf:2d:66:d9:03:44:7a:01:ea:a0:43:77:16:1c:11:14:
         81:f3:54:22:b2:ad:09:de:63:b8:ff:67:ef:12:2a:74:c9:72:
         30:4e:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org